emaley-whaley[.]workers[.]dev

The domain emaley-whaley.workers.dev was first registered on February 08, 2019 and is hosted via Cloudflare Workers, a serverless platform that provides edge‑distributed hosting. Automated scans on VirusTotal involving 91 anti‑malware engines have not returned any detections to date, but the absence of flags does not constitute a safety guarantee. The domain is currently listed on three independent security blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, indicating that at least three threat‑intelligence feeds have observed malicious use.

No public Safe Browsing, Open Threat Exchange, or similar reputation data is available for this host, and there are no disclosed SSL certificate details, HTTP response codes, or page‑title metadata at this time. Consequently, while the existing blocklist entries and the Cloudflare Workers hosting pattern are consistent with known phishing‑hosting practices, the lack of additional observable indicators leaves the precise payload or credential‑harvesting mechanisms unconfirmed.

Defenders should continue to enforce blocklist rules that include this domain, monitor outbound traffic for connections to the Cloudflare edge network associated with the host, and consider adding the domain to internal deny lists. Given the historical use of Cloudflare Workers for rapid phishing deployment, any attempted connections from corporate endpoints should be logged and investigated, and users should be reminded to verify URLs before entering credentials, especially when encountering unfamiliar subdomains under the workers.dev namespace.